A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@winkwaves.com
Contact: tel:+31707119119
Encryption: openpgp4fpr:818B58784EB13C5DD8CF401BBB1FE687EFDBB3EC
Preferred-Languages: en, nl
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEIggVRmJzp0YePtgn2zR/k4ZU+jQFAl4v6mwACgkQ2zR/k4ZU
+jTe+Af/aMZ//zWKrNaqoIQpzFA7ipvDiI8DMuASirjTBsNYpk8tYXTfE7eUI7Gu
yVnHIj/ceD6gRDM5pWdmTsLsWD4KKdCZpN38CVZVbR2es6QnlZCUQsDHNazJAH5G
FkiHjosMyATQt454MuyWQpiVQsAjQ4nA5yrNS7PblOD3i5xEqWMeZn6+R0r9PWw+
g9SuWesgcWG4z+ov/kH8sAkCHaDd4/LsHmAdGYSqjt86fB9RpbwPI08OACmwwmgw
0BwfhLeajqO5WahfLhF4WMdXQlNBTcMsw6xL7ML9ANN9SX3Irexo13I7KJkduRM7
ez0t0V6zyzn82B/d78ijzQI3eZh5tw==
=8Daj
-----END PGP SIGNATURE-----